d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixed bug I just introduced that would have allowed a user to clobber

Browse Source 
his kernel stack.
This commit is contained in:
dg 1994-10-18 04:40:41 +00:00
parent 56d17bcede
commit 3826d4d70e
2 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sys/fs/procfs/procfs_mem.c
View File

@ -37,7 +37,7 @@
*
* @(#)procfs_mem.c 8.4 (Berkeley) 1/21/94
*
* $Id: procfs_mem.c,v 1.3 1994/09/15 19:47:47 bde Exp $
* $Id: procfs_mem.c,v 1.4 1994/10/18 04:26:53 davidg Exp $
*/
/*
@ -86,9 +86,11 @@ procfs_rwmem(p, uio)
int fix_prot;
uva = (vm_offset_t) uio->uio_offset;
if (uva >= VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE) {
error = 0;
break;
if (uva >= VM_MAXUSER_ADDRESS) {
if (writing || (uva >= (VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE))) {
error = 0;
break;
}
}
/*

10
sys/miscfs/procfs/procfs_mem.c
View File

@ -37,7 +37,7 @@
*
* @(#)procfs_mem.c 8.4 (Berkeley) 1/21/94
*
* $Id: procfs_mem.c,v 1.3 1994/09/15 19:47:47 bde Exp $
* $Id: procfs_mem.c,v 1.4 1994/10/18 04:26:53 davidg Exp $
*/
/*
@ -86,9 +86,11 @@ procfs_rwmem(p, uio)
int fix_prot;
uva = (vm_offset_t) uio->uio_offset;
if (uva >= VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE) {
error = 0;
break;
if (uva >= VM_MAXUSER_ADDRESS) {
if (writing || (uva >= (VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE))) {
error = 0;
break;
}
}
/*